Static task
static1
Behavioral task
behavioral1
Sample
41a3ce4bd9a137d65581ebc6e0a007ce_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
41a3ce4bd9a137d65581ebc6e0a007ce_JaffaCakes118
-
Size
99KB
-
MD5
41a3ce4bd9a137d65581ebc6e0a007ce
-
SHA1
c8f022832daf6e5e6e9a1b2a118340ae02ea3774
-
SHA256
1ab12350d804436bd1a33a8c5850b8e093d61c9bf9028e843dba704c99fdf53e
-
SHA512
b217a6afbaa3c69d621e69ecd7c2c1dc39d2cd30738edfbbd0536eba79f2d409e612ddf24e50c2186b22ac7e039aa7409b95d044fd381e3fdb464d8623156b6f
-
SSDEEP
1536:FOL9dt0YI1RKB6gT3bOuv2MrOoD/5q/8shcrpVGFSX/YVWQIDX69si8YzeaV8oJr:FOL9dt0YbHrv/o8Vo9XKap7pS22+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a3ce4bd9a137d65581ebc6e0a007ce_JaffaCakes118
Files
-
41a3ce4bd9a137d65581ebc6e0a007ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 98KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE